← Back to search

io.github.rupinder2/mcp-gateway

rupinder2 Scanned 9d ago

Aggregates tools from multiple MCP servers with unified BM25/regex search and deferred loading.

B
79.2 / 100

Versions

0.1.1latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 2

tool_search
annotations: none low

Search for tools using BM25 relevance ranking or regex pattern matching. Searches across tool names, descriptions, and argument names/descriptions. By default, uses BM25 natural language search. Set use_regex=True to search using Python regex patterns instead. Returns tool_reference blocks for discovered tools with deferred loading. Args: query: Natural language query (BM25) or regex pattern (if use_regex=True) max_results: Maximum number of results (1-10, default 3) use_regex: If True, treat query as regex pattern; otherwise use BM25 search Returns: Tool search results with tool_reference blocks for discovered tools

query str use_regex bool max_results int
call_remote_tool
annotations: none low

Call a tool directly on a registered remote MCP server through the orchestrator. This tool allows direct invocation of any tool on a downstream MCP server. The tool name should be in the format 'server_name__tool_name' (e.g., 'context7__query-docs'). Args: tool_name: Full tool name in format 'server_name__tool_name' arguments: Tool arguments as a dictionary (optional) auth_header: Optional auth header to use for this call (overrides registered auth) Returns: Raw tool call result from the remote server

arguments string tool_name str auth_header string

Permissions 4

network medium
Server uses network capabilities via: httpx
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib
database medium
Server uses database capabilities via: redis
env_vars low
Server uses env_vars capabilities via: os.getenv()

Scan Findings 35

medium
Vulnerable dependency: fastmcp@2.14.0 (PYSEC-2026-2475) dependency_analyzer · 95%
low
Tool 'tool_search' has no annotations annotation_checker · 100%
low
Tool 'call_remote_tool' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: fastmcp@2.14.0 (GHSA-5h2m-4q8j-pqpj) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.14.0 (GHSA-m8x7-r2rg-vh5g) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.14.0 (GHSA-rww4-4w9c-7733) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.14.0 (GHSA-vv7q-7jx5-f767) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.14.0 (PYSEC-2026-2474) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.14.0 (PYSEC-2026-2476) dependency_analyzer · 95%
medium
Vulnerable dependency: fastmcp@2.14.0 (PYSEC-2026-338) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (GHSA-mf9w-mj56-hr94) dependency_analyzer · 95%
medium
Vulnerable dependency: python-dotenv@1.0.0 (PYSEC-2026-2270) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: tool_search manifest_parser · 90%
info
Tool: call_remote_tool manifest_parser · 90%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (12) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 80%
medium
Permission: database access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%